CyberSecurity-Box

KO | EN

gitlite — search

#python #hacktoberfest #typescript #go #android #machine-learning #linux #macos #java #windows #awesome #kubernetes #pytorch #open-source

CyberSecurity-Box

(★ 41)

Firewall-System based on OpenWRT or Pi-Hole with UnBound, TOR, optional Privoxy, opt. ntopng and opt. Configuration of the AVM FRITZ!Box with Presets for Security and Port-List. Please visit:

CyberSecurity-Box 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

<head>
<base href="https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box/">
<meta name="google-site-verification" content="puDJPKt82mah02UkmE5ThtOtTU-B1gTDxL5i85x9wSI" />
</head>
<body style="background-color: #212830; color: #d1d7e0;">
<img src="https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box/wiki_pic/csb_logo_neu.svg" alt="Logo" width="300px">
<h1>CyberSecurity-Box</h1>
<h4>(inkl. Ad Blocker, <img src="https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box/wiki_pic/unbound_logo.png" style="max-width: 100%; vertical-align: middle; background-color: rgba(230,230,230,0.; padding: 0.15em 0.25em; height:1em;background-color: #262c36;" height="14px"> (DNS), <img src="https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box/wiki_pic/tor-logo%402x.png" style="max-width: 100%; padding: 0em; height:1em;background-color: #262c36;" height="14px"> Tor optional <img src="https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box/wiki_pic/pihole.png" style="max-width: 100%; padding: 0em; height:1em;background-color: #262c36;" height="14px"> Pi-Hole (incl. DB) and ntopng) </h4>

<h4><a href="https://github.com/CyberAndi/CyberSecurity-Box/wiki/Deutsch"><img src="https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box/wiki_pic/de.gif" style="width:20px; padding: 0em; height:1em;background-color: #262c36;" height="14px"></a><a href="https://github.com/CyberAndi/CyberSecurity-Box/wiki/Deutsch">&nbsp; F&uuml;r Deutsch / For German</a></h4>

 First load the <a href="https://brave.com/download/" target="_blank"><img src="https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box/wiki_pic/brave-logo-sans-text.svg" style="max-width: 100%; vertical-align: middle; padding: 0em; height:1em;background-color: #262c36;" height="14px"> Brave-Browser </a> from the <a href="https://brave.com/" target="_blank">Brave-Website </a>. 
For the Raspberry-Pi Installation goto <a href="#raspi"> Alternative 2 </a>.	
<ol><h3><li>Alternative 1 - Installation on <img src="https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box//wiki_pic/openWRT.png" style="max-width: 100%; vertical-align: middle; padding: 0em; height:1em;background-color: #262c36;" height="20px">-Router( <img src="https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box/wiki_pic/AVM_logo.png" style="max-width: 100%; vertical-align: middle; padding: 0.15em 0.25em; height:1em; background-color: #262c36;" height="20px" alt="AVM"> Fritz!Box, <img src="https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box/wiki_pic/tplink-logo-white.svg" style="max-width: 100%; vertical-align: middle; padding: 0em; height:1em;background-color: #262c36;" height="20px" alt="tp-link">, <img src="https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box/wiki_pic/ASUS_logo.png" style="max-width: 100%; vertical-align: middle; padding: 0em; height:1em;background-color: #262c36;" height="20px" alt="ASUS"> etc.)</li> </h3>
 Go on <a href="https://openwrt.org/" target="_blank"><img src="https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box/wiki_pic/openWRT.png" style="max-width: 100%; vertical-align: middle; padding: 0em; height:1em;background-color: #262c36;" height="20px">-Page</a> and download the <a href="https://firmware-selector.openwrt.org/" target="_blank">Firmware</a> for your Router. Please click before on <code>Customize installed packages and/or first boot script</code> then add the following items at the end. 
<pre style="background-color: #262c36;"><code>ca-bundle dnsmasq-full stubby tor tor-geoip unbound-daemon unbound-anchor unbound-control-setup unbound-host unbound-checkconf luci-app-unbound tc luci-app-qos luci-app-nft-qos nft-qos kmod-nls-cp437 kmod-nls-iso8859-1 nano wget curl openssh-sftp-server getdns drill bind-dig ca-certificates acme luci-app-acme php8-fpm php8-cgi mwan3 luci-app-mwan3</code></pre>
 into the field <code>Installed Packages</code>. 
<img src="https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box/wiki_pic/Make Firmware.gif" alt="Make Firmware" width="50%"> 
 
 <img src="https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box/wiki_pic/Firmware_Config.png" alt="select_packages" width="50%"> 
 And in the field <code>Script to run on first boot (uci-defaults)</code> insert. 
 <pre style="background-color: #262c36;"><code>echo 'start '$(date) > /root/firstboot && uci set network.wan6.disabled='1' && processes=$(uci commit && reload_config) && wait $processesss && processes1=$(/etc/init.d/network restart) && sleep 30 && echo 'starting..' > /root/wget_start && wget https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box/customize_firmware.sh -P /root/ && sh /root/customize_firmware.sh && echo 'end '$(date) > /root/end && exit 0 </code></pre>
 Then press <code>Request Build</code>. 
 <img src="https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box/wiki_pic/Request_build.png" alt="select_packages" width="50%"> . 
 Afterwards generate the File with <code>Kernel</code> and download it. 
 <img src="https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box/wiki_pic/generate_firmware.png" alt="select_packages" width="50%"> 
 
 After flushing use SSH or Putty for Installation and type the following code. 
 <pre style="background-color: #262c36;"><code>ssh [ip-address of OpenWRT]</code></pre>
 User: root
 
 Password: 
 Change the Password with 
 <pre style="background-color: #262c36;"><code>passwd
[newpassword]
[newpassword]</code></pre>
 Don´t forget to note the newpassword. Now go to the <a href="#afterreboot">Network-Overview </a>.
 
<details>
 <summary>If you didn´t insert the <code>Script to run on first boot (uci-defaults)</code> then download the Installscript. (For more Informations open here). </summary> 
 It starts automatically. Else skip this Part and go to <a href="#afterreboot">Network-Overview </a>. 
 for OpenWRT Version 23.x.xx 
 <pre style="background-color: #262c36;"><code>wget https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box/Install/openWRT23_install.sh && sh openWRT23_install.sh
 </code></pre>
 
 for OpenWRT Version 22.x.xx 
 <pre style="background-color: #262c36;"><code>wget https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box/Install/openWRT22_install.sh && sh openWRT22_install.sh
 </code></pre>
 
 for OpenWRT Version 21.x.xx 
 <pre style="background-color: #262c36;"><code>wget https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box/Install/openWRT21_install.sh && sh openWRT21_install.sh
 </code></pre>
 
 for OpenWRT Version 19.x.xx 
 <pre style="background-color: #262c36;"><code>wget https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box/Install/openWRT19_install.sh && sh openWRT19_install.sh
 </code></pre>
 Now it will appear some Questions about your Network and your Devices. Note: All Values needed !!.
 
 <img src="https://user-images.githubusercontent.com/46010442/127338090-c8fa4a0c-c2ec-4e62-938e-9c5b6320bd41.jpg" width="50%">
 
</details>

 <h3>After the reboot you will have following Networks: </h3>
 <ul>
 <li>REPEATER for internal Communication between Router and Repeater for all of this Networks</li>
 <li>VOICE for Amazon Alexa, Google Assistent or other Voice Assistent-Systems</li>
 <li>CONTROL for IR/RF-Controlling like Logitech Harmony, Broadlink etc. </li> 
 <li>HCONTROL for Homeautomation or Smarthome (Heating, Cooling, Dor-, Window-Contacts, Power-Switches etc.)</li>
 <li>ENTERTAIN for TVs, PlayStation, X-Box, Mediaplayer, DVD-Player and BlueRay-Player etc.</li>
 <li>DMZ for NAS, Network Storage, PLEX-Server, UPNP/DLNA-Servers, Database-Servers, Mail-Server and Web-Server etc.</li>
 <li>INET for Clients with .onion and Tor-Network Access</li>
 <li>GUEST for your Guests only</li>
 </ul> 
 All of this have the WiFi-Password/-Key: Cyber,Sec9ox 
 For each of this separated Networks you will have a VLAN on the Switch-/Output-Ethernet-Ports of the Router between VLAN_ID 101 and VLAN_ID 106.
 You will find the Screenshots <a href="https://github.com/CyberAndi/CyberSecurity-Box/blob/CyberAndi-Pi-Hole-5/README.md#screenshots"> here </a>. 
 
 
<h3><li id="raspi">Alternative 2 - Installation CyberSecurity-Box ( <img src="https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box/wiki_pic/RaspBerry.png" style="max-width: 100%; vertical-align: middle; padding: 0em; height:1em; background-color: #262c36;" height="20px"> Raspberry-Pi) </li> </h3>
 You need a Raspberry Pi and a SD-Card with 8 GByte or more.
 Use a blank <a href="https://www.raspberrypi.org/downloads/raspbian/" target="_blank"> Raspbian-SD-Card-Image </a> or 
 CyberSecurityBox_2.img is the Pi-Hole, UnBound and torrc with a ready-to-use Image.
 Install one of this with <a href="https://www.balena.io/etcher/" target="_blank"> balenaEtcher </a> on a SD-Card. Insert the SD-Card in the RasPi. And use SSH or Putty for Installation and type the following code. 
 <pre style="background-color: #262c36;"><code>ssh [ip-address of RasPi]</code></pre>
 User: pi
 
 Password: raspberry 
 Change the Password with 
 <pre style="background-color: #262c36;"><code>passwd
[newpassword]
[newpassword]</code></pre>
 Don´t forget to note the newpassword. 
 
 <pre style="background-color: #262c36;"><code>sudo su
apt-get update
apt-get upgrade -y</code></pre>
 <ol>
 <li>
<h4>Type for Installation</h4>
 <pre style="background-color: #262c36;"><code>apt-get install tor unbound privoxy ntopng postfix iptables-persistent netfilter-persistent -y
curl -sSL https://install.pi-hole.net | bash</code></pre>
 and follow the messages on the screen. 
 </li>
 <li>
 <h4>The <a href="https://github.com/CyberAndi/CyberSecurity-Box/blob/CyberAndi-Pi-Hole-5/pi-hole-teleporter_2020-06-07_09-38-48.tar.gz" target="_blank">pi-hole-teleporter_2020-06-07_09-38-48.tar.gz</a></h4>
 Is the newest Version with PiHole 5.0 and DataBase Support. It includes the Porn-, Ad- and Tracking-Blocking.
 </li>
 <li>
 <h4>The <a href="https://github.com/CyberAndi/CyberSecurity-Box/raw/master/pi-hole-teleporter_CyberSecurity_Box_without_Porn.tar.gz" target="_blank">pi-hole-teleporter_CyberSecurity_Box_without_Porn.tar.gz</a></h4> inludes White- and Blacklist (Advertisement and Maleware). Until Pi-Hole 4 and smaller</li>
 <li>
 <h4>The <a href="https://github.com/CyberAndi/CyberSecurity-Box/raw/master/pi-hole-teleporter_CyberSecurity_Box_without_Porn.tar.gz" target="_blank">pi-hole-teleporter_CyberSecurity_Box_2018-12-20_.tar.gz</a></h4> inludes White- and Blacklist (Advertisement, Maleware, Tracking and Porn). Until Pi-Hole 4 and smaller</li>
 <li>
 <h4>The Pi-Hole 4 <a href="https://github.com/CyberAndi/CyberSecurity-Box/raw/master/regex.list" target="_blank">regex.list</a></h4> includes Blacklist (Advertisment, Maleware, Tracking and Porn) with over 40% blocking rate. In pi-hole-teleporter_2020-06-07_09-38-48.tar.gz is this included for Pi-Hole5. 
 <pre style="background-color: #262c36;"><code>service pihole-FTL stop
service unbound stop
service privoxy stop
service tor stop
curl -sSL --compressed https://github.com/CyberAndi/CyberSecurity-Box/raw/Version2/whitelist_Alexa_Google_Home_Smarthome.txt > whitelist.txt
curl -sSL --compressed https://github.com/CyberAndi/CyberSecurity-Box/raw/Version2/tor/torrc > torrc
curl -sSL --compressed https://github.com/CyberAndi/CyberSecurity-Box/raw/Version2/unbound/root.hints > root.hints
curl -sSL --compressed https://github.com/CyberAndi/CyberSecurity-Box/raw/Version2/unbound/unbound.conf > unbound.conf
curl -sSL --compressed https://github.com/CyberAndi/CyberSecurity-Box/raw/Version2/unbound/unbound.conf.d/test.conf > unbound_tor_pihole.conf
curl -sSL --compressed https://github.com/CyberAndi/CyberSecurity-Box/raw/Version2/unbound.sh > unbound.sh
curl -sSL --compressed https://github.com/CyberAndi/CyberSecurity-Box/raw/Version2/privoxy/config > config
curl -sSL --compressed https://github.com/CyberAndi/CyberSecurity-Box/raw/Version2/boxed-bg.jpg > boxed-bg.jpg
curl -sSL --compressed https://github.com/CyberAndi/CyberSecurity-Box/raw/Version2/boxed-bg.png > boxed-bg.png
curl -sSL --compressed https://github.com/CyberAndi/CyberSecurity-Box/raw/Version2/blockingpage.css > blockingpage.css
curl -sSL --compressed https://github.com/CyberAndi/CyberSecurity-Box/raw/Version2/AdminLTE.min.css > AdminLTE.min.css
curl -sSL --compressed https://github.com/CyberAndi/CyberSecurity-Box/raw/Version2/skin-blue.min.css > skin-blue.min.css
 
cp whitelist.txt /etc/pihole/whitelist.txt
cp root.hints /etc/unbound/root.hints
cp unbound.conf /etc/unbound/unbound.conf
cp unbound.sh /etc/cron.weekly
cp unbound_tor_pihole.conf /etc/unbound/unbound.conf.d/unbound_tor_pihole.conf -r -v
cp config /etc/privoxy/config
cp boxed-bg.jpg /var/www/html/admin/img/boxed-bg.jpg
cp *.css /var/www/html/admin/style/vendor/
cp blockingpage.css /var/www/html/pihole/
 
service tor start
service privoxy start
service unbound start
service pihole-FTL start
 </code></pre>
 </li>
 </ol>
 
 <h3><li>Alternative 2 optional - Pi_Hole Configuration of the AVM FRITZ!Box with Presets for Security and Port-List </li></h3>
<h4>This <a href="https://github.com/CyberAndi/CyberSecurity-Box/blob/master/CyberSecurityBox.zip" target="_blank">zip-File</a></h4> includes a AVM FRITZ!Box-Export-File for FRITZ OS 6.80 and above. It includes Firewall-Rules for Amazon Alexa/Echo, Google Assistens, NAS, MS-Servers etc. 
 <img src="https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box/wiki_pic/Schema.PNG" width="450px">

</ol>

For more Information in german visit <a href="https://cyberandi.tumblr.com/Smarthome" target="_blank"> https://cyberandi.tumblr.com/Smarthome</a>

<hr>

email: [programming@cyberandi.slmail.me](mailto:programming@cyberandi.slmail.me) 
https://cyberandi.tumblr.com

<hr>

<h3>Screenshots</h3>

<img src="https://user-images.githubusercontent.com/46010442/127338090-c8fa4a0c-c2ec-4e62-938e-9c5b6320bd41.jpg" alt="Set Parameters" width="50%">

<img src="https://user-images.githubusercontent.com/46010442/133788783-9ef6d6c9-4428-4bb1-9971-ddb40f524e4b.png" alt="Login Page" width="50%">

<img src="https://user-images.githubusercontent.com/46010442/133788864-be55d84f-47d3-44b9-9134-31b903ff1938.png" alt="Overview" width="50%">

<img src="https://user-images.githubusercontent.com/46010442/133788889-e6e42258-6f8d-4d8b-a3f3-2d557e490531.png" alt="Overview 2" width="50%">

<img src="https://user-images.githubusercontent.com/46010442/133786871-56b38494-6326-4194-8e37-1f62a4b30d9d.png" width="50%">

<img src="https://user-images.githubusercontent.com/46010442/133786876-76f2cf7d-5fe4-4a64-81a5-66d1333a52ec.png" width="50%">

<img src="https://user-images.githubusercontent.com/46010442/133786879-ebaed5be-1853-48c2-b3fa-dc22966e454f.png" width="50%">

<img src="https://user-images.githubusercontent.com/46010442/133790948-5b2b2d82-c296-4484-831b-9527ed791ba9.png" width="50%"> 

<img src="https://user-images.githubusercontent.com/46010442/133790213-459364b2-5120-491f-8db4-7b009f8ed46b.png" width="50%">
 
<img src="https://user-images.githubusercontent.com/46010442/133786886-1caf75ce-e220-40d3-adcb-980bf081a8a9.png" width="50%">

<img src="https://user-images.githubusercontent.com/46010442/133786890-071828fc-80dd-4ce6-ab08-15ce47c9f000.png" width="50%">

<img src="https://user-images.githubusercontent.com/46010442/133786902-e4167664-97dc-4a85-a491-0698f349a572.png" width="50%">
 
<img src="https://user-images.githubusercontent.com/46010442/133786905-74f2d27a-8813-46a1-b4f9-bd415abbe14a.png" width="50%">

<img src="https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box/wiki_pic/263396213-d3fcdc8a-b8f0-4531-bca4-b7e9831a020b.jpeg" width="50%">

<img src="https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box/wiki_pic/263396269-5b502b53-1cea-4024-afc5-3847ac6cccca.jpeg" width="50%">

<img src="https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box/wiki_pic/263396319-282b4391-3a9e-4efe-8b8a-73efd6b22dc0.jpeg" width="50%">

<img src="https://github.com/CyberAndi/CyberSecurity-Box/raw/CyberSecurity-Box/wiki_pic/263396364-3906e52e-3e02-47ae-9b61-ecb9e498955b.jpeg" width="50%">

<hr>

email: [programming@cyberandi.slmail.me](mailto:programming@cyberandi.slmail.me) 
https://cyberandi.tumblr.com

</body>

CyberSecurity-Box

CyberSecurity-Box 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

CyberSecurity-Box

CyberSecurity-Box 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README